arxiv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested from public arXiv Atom XML at runtime via curl/urllib to https://export.arxiv.org/api/query?..., where <title>/<summary> (abstract text) are parsed and printed into the agent’s context; this is outsider-authored scholarly content.